Skip to content
OpenAdvisories

Archive

23 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /23 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2021-2322

    Vulnerability in OpenGrok (component: Web App). Versions that are affected are 1.6.7 and prior. Easily exploitable vuln…

    Oracle OpenGrok
  • High 8.2
    CVE-2021-21809 Public exploit EPSS 24%

    Moodle command execution vulnerability exists in the default legacy spellchecker plugin

    A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An attacker must have administrator privileges to exploit this vulnerabilities.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • High 7.5
    CVE-2021-29620

    XXE vulnerability on Launch import with externally-defined DTD file

    Report portal is an open source reporting and analysis framework. Starting from version 3.1.0 of the service-api XML parsing was introduced. Unfortunately the XML parser was not configured properly to prevent XML external entity (XXE) attacks. This allows a u…

    reportportal reportportal com.epam.reportportal:service-api Maven
  • High 7.5
    CVE-2021-29084

    Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Sec…

    Synology DiskStation Manager (DSM)
  • High 8.6
    CVE-2021-29085

    Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in fil…

    Synology DiskStation Manager (DSM)
  • High 7.5
    CVE-2021-29087

    Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…

    Synology DiskStation Manager (DSM)